The npm package '@isv-occ-payment/occ-payment-service' version 77.77.79 has been identified as containing malicious code. It communicates with a domain linked to malicious activity, indicating it is designed to compromise affected systems. Any computer with this package installed should be considered fully compromised, and all secrets and keys stored on that system should be rotated immediately from a different, secure machine. Removing the package alone may not fully remediate the compromise due to potential persistent malicious software.